CVE-2025-21669

Summary

CVE-2025-21669 is a recently identified vulnerability in the Linux kernel. This issue affects the vsock/virtio subsystem, where packets are not discarded if the transport changes. This can result in receiving packets that are not expected, leading to potential issues when accessing vsk->transport. In particular, if a socket has been de-assigned or assigned to another transport, null pointer dereferencing may occur. A scenario illustrating this behavior is described in detail by Hyunwoo Kim in the provided link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.